Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
File: tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft (raw, json)
Hash identifier: 56/psFXQz4LU1/BWmBg/y+ffwCwZHxcGx2tLZXfDEls=
Subject key identifier: 93:00:3D:78:58:CC:CC:FB:49:1C:67:4E:3E:8D:A3:EC:E5:5D:99:C7
Authority key identifier: B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
Certificate issuer: /CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Certificate serial: 019A4FD0830F03B16541A69DEC2F43EDC9C0
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
Manifest number: 170C
Signing time: Tue 04 Nov 2025 17:00:56 +0000
Manifest this update: Tue 04 Nov 2025 17:00:56 +0000
Manifest next update: Wed 05 Nov 2025 17:00:56 +0000
Files and hashes: 1: TDDnhsWgxkGdG7BfGlC4CIB8hXc.roa (hash: mAFWPEFNFtu12Nez2hG2dDFI+Ij+KVUdoJCzsE5w8Wg=)
2: tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl (hash: 5a5qrcjZCZ6U0xNBb8hb2eFsdr8+CMKTydV0lTPnf6Q=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 05 Nov 2025 09:00:03 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9a:4f:d0:83:0f:03:b1:65:41:a6:9d:ec:2f:43:ed:c9:c0
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=b6fe63ee8a23f4916e4053531e6950db6c31e805
Validity
Not Before: Nov 4 17:00:56 2025 GMT
Not After : Nov 5 17:00:56 2025 GMT
Subject: CN=93003d7858ccccfb491c674e3e8da3ece55d99c7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a3:06:8c:8a:c2:9d:94:4c:fb:c7:d3:04:75:33:
dc:c1:98:2f:0a:06:a6:17:29:bb:ac:fb:4e:5e:ec:
9a:ea:a5:76:76:f3:82:d8:70:8a:11:70:3e:de:41:
f4:b8:4f:53:5e:03:b7:7b:e0:d6:3d:82:82:2c:31:
43:90:55:e5:ca:78:19:45:d5:a1:17:6f:23:f3:8d:
85:e7:53:81:1c:20:55:4e:c7:fc:4a:90:d9:b0:c5:
e4:84:d2:ba:e3:6e:73:ce:fe:0f:e3:03:94:2f:02:
04:fb:da:58:c3:e5:13:f3:3b:a3:61:06:ba:77:2f:
05:a7:32:35:73:25:2f:3c:e8:a2:4c:06:39:a3:46:
a7:c1:cd:a6:01:53:73:d5:49:f7:48:34:73:d3:e5:
61:b4:62:c2:3e:04:eb:89:a6:07:7f:5b:ca:f5:d9:
73:e0:a8:22:10:73:d0:2d:f6:e4:2a:1e:4c:09:f0:
32:31:73:3e:37:2f:12:35:f6:98:e2:29:e5:2e:b2:
5a:14:26:bd:fb:21:b4:18:cb:d2:1b:42:d4:e1:ca:
2b:e0:06:da:33:55:1a:23:b1:d2:82:3e:c4:48:a7:
59:82:dd:21:8d:cb:b4:d6:21:bf:2b:7c:a0:88:e9:
26:da:a4:bc:a3:14:8d:ed:88:03:ec:45:ab:62:1c:
04:71
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
93:00:3D:78:58:CC:CC:FB:49:1C:67:4E:3E:8D:A3:EC:E5:5D:99:C7
X509v3 Authority Key Identifier:
keyid:B6:FE:63:EE:8A:23:F4:91:6E:40:53:53:1E:69:50:DB:6C:31:E8:05
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/tv5j7ooj9JFuQFNTHmlQ22wx6AU.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/de/7edbcf-b90f-4707-b289-a3d377c6feef/1/tv5j7ooj9JFuQFNTHmlQ22wx6AU.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
77:fb:ad:93:73:0f:4b:7a:6d:66:f7:72:02:fc:79:de:a5:77:
8c:03:d8:2e:ec:86:7b:22:8a:d5:19:c2:57:14:4c:bb:2e:a7:
e1:04:d3:8f:dc:31:a6:29:93:49:2a:bf:3c:c4:f7:f8:49:cd:
2c:79:7b:6e:97:86:4e:b8:1a:9a:b2:39:01:e2:e9:7b:86:28:
38:04:17:df:11:32:5c:1d:5f:80:82:3d:a0:30:fc:37:2c:da:
eb:79:25:ad:8b:19:3e:34:14:63:1c:e9:5e:1b:98:bb:7d:14:
ce:a9:66:ac:00:17:a8:65:7c:b9:d7:f7:1b:f3:91:00:00:af:
b0:46:c6:20:06:b7:a2:94:51:02:0c:73:64:ae:f0:21:d2:15:
2b:ae:ed:2a:53:84:f7:db:c0:e9:3c:93:51:17:8c:e8:ea:ff:
0a:34:6d:3e:0e:47:14:5a:c0:1e:ea:de:9d:22:12:26:c6:65:
d5:46:75:db:91:1f:75:25:4d:9d:76:48:ee:6c:d0:a7:12:d8:
8c:28:3b:6f:74:20:57:bf:28:ef:23:5b:ad:d3:53:4e:27:14:
27:db:8f:c5:bc:9d:37:f0:cf:37:b8:ca:77:84:8b:4b:2b:1f:
ab:33:fc:94:a6:24:ff:d7:cd:f4:04:8d:60:36:29:43:48:ef:
84:3e:63:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Nov 4 18:35:47 2025 by rpki-client